Malware: BADCALL

Description

[BADCALL](https://attack.mitre.org/software/S0245) is a Trojan malware variant used by the group [Lazarus Group](https://attack.mitre.org/groups/G0032). (Citation: US-CERT BADCALL)

External References

• mitre-attack
• US-CERT BADCALL

Techniques Used by This Malware

• T1001.003 — Protocol or Service Impersonation
• T1016 — System Network Configuration Discovery
• T1082 — System Information Discovery
• T1090 — Proxy
• T1112 — Modify Registry
• T1562.004 — Disable or Modify System Firewall
• T1571 — Non-Standard Port
• T1573.001 — Symmetric Cryptography

APT Groups Using This Malware

• Lazarus Group